[ Hotline - 10633 ]

BSH Home

Home Home

Privacy Policy


Welcome to the BSHL website & mobile application privacy policy. This application is an integral part of the Bangladesh Specialized Hospital PLC, 21 Shyamoli, Mirpur Road, Dhaka-1207, Bangladesh. The application itself is interlinked with our hospital network.

A privacy policy is a necessary requirement for our application and user’s personal data security concern. This can be changed or updated in the future following proper procedures. We urge you to go through our privacy policy to know more about what you are using in your phone.

Things you will read about later on:

  • Applicable Readers
  • Data Collected
  • Reason for Data Collection
  • Data Retention
  • Data Security
  • Third Party Service Providers
  • User Rights
  • Contact Us

Applicable Readers

The people who can benefit by reading our privacy policy.

  1. New User.
  2. Existing Patient.
  3. Healthcare Professionals.

Data Collected

Below are the data that is collected by the applicable user.

  1. Registration data: We require some data when registering for the first time. Required inputs are below: 
    • Phone number.
    • Password. (Secured)
    • OTP SMS authentication.
  1. Basic Information: After confirming with the number, we will require the below information, 
  • Name
  • Date of Birth
  • Gender
  • Email address.
  • Home address.
  1. Optional Information: We collect these information if the user shares. 
  • NID number.
  • Birth Certificate number.
  • Passport number.
  1. Sensitive Information: 
  • Hospital Number: if you are already a part of our hospital network. Your hospital number links to your past, present and future medical records.
  • Medical History Data: We collect patients medical test history, present conditions, medications and other medical data required by our enlisted healthcare professionals.
  1. Usage Data: There are some information that we collect automatically, either by using analytics or cookies. Some usage data points are given below, 
  • Device type
  • Device unique identification number.
  • Device IP address.
  • Device operating system.
  • Device Session data.
  • Other diagnostic data.
  1. Doctor Portal Data: After individual login procedure, our healthcare professionals can use their designated username and password to login and check their patient and appointments status.

Reason for Data Collection

  1. Healthcare Services: Most crucial reason for data collection is to give the patient smooth medical services the hospital provides. Some service includes: 
    • Doctor appointments.
    • Medical Tests. (Lab/Non-lab)
    • Online report view.
    • Emergency service.
    • Ambulance Service.
  1. Corporate Requirements: We have a vast corporate environment where we follow all the necessary corporate procedures to process the the personal and medical data of the user.
  2. Legal Reason: When applicable we may need the data for legal reason linked with local or government authority and law.
  3. Quality Assurance: We strive for any quality change in our hospital services. So we may process the data in order to improve the quality of the application and its services.

Data Retention

We retain your personal and medical data for as long as needed for legal, medical and corporate reasons. For the data that are collected automatically usually retained for a shorter period of time due to digital security requirements.

Data retention doesn’t mean you won’t be able to request for deletion. We are obliged to assess your request since its your data.

Data Security

We have all the necessary equipment for ensuring the data security in our dedicated servers. We follow international standards to maintain, backup and secure the data. In the modern world, data security can never be guaranteed but we will make sure to take every necessary attempt to secure and update our security as time goes by.

Third Party Service Providers

We may share data to third party service providers for various reasons below:

  • To ensure quality services and upgrades.
  • To complete legal procedures.
  • When the company is involved in a merger, acquisition or asset-sale.

User Rights

The user has the right to request access to their personal data, delete or make any changes to their personal information. If ever need of any request, please go to our contact section to contact us.

Contact Us